WO2014201158A1

WO2014201158A1 - Network management systems and methods

Info

Publication number: WO2014201158A1
Application number: PCT/US2014/041977
Authority: WO
Inventors: Zsolt Haraszti; Darren James DOWKER; Richard Sherman LOPEZ
Original assignee: Cyan Inc.
Priority date: 2013-06-11
Filing date: 2014-06-11
Publication date: 2014-12-18
Also published as: US20140365648A1; US20190097868A1; EP3008615A4; US10862734B2; TW201511504A; US10177962B2; EP3008615A1

Abstract

Example network management systems and methods are described. In one implementation, a method identifies at least one network resource to be managed and identifies at least one domain to be managed. The method further identifies at least one service provider to be managed. A fusion object is created that defines the network resource, the domain, and the service provider to be managed.

Description

NETWORK MANAGEMENT SYSTEMS AND METHODS

CROSS REFERENCE TO RELATED APPLICATIONS

[0001] This application claims the priority benefit of U.S. Provisional Application Serial No. 61/833,788, entitled "Network management systems and methods", filed June 11 , 2013, the disclosure of which is incorporated by reference herein in its entirety

TECHNICAL FIELD

[0002] The present disclosure relates to systems and methods that manage various systems and resources in a network environment.

BACKGROUND

[0003] Modern networks can be very complex. For example, large networks may span significant geographic distances and contain a large number of physical resources, virtual resources, sub-networks, domains, service providers, and the like. It can be difficult to manage large networks, particularly when the networks span multiple domains, multiple service providers, and multiple data center providers. Existing techniques often require multiple different network management systems to effectively manage the various systems and resources in such a large network.

[0004] The systems and methods described herein support the management of multiple network systems and resources using a single managed object. BRIEF DESCRIPTION OF THE DRAWINGS

[0005] Non-limiting and non-exhaustive embodiments of the present disclosure are described with reference to the following figures, wherein like reference numerals refer to like parts throughout the various figures unless otherwise specified.

[0006] FIG. 1 is a block diagram depicting an environment within which an example embodiment may be implemented.

[0007] FIG. 2 is a block diagram depicting an example collection of resources and services managed by a single network management system.

[0008] FIGs. 3A-3C depict example collections of resources and services grouped together into individual fusion objects.

[0009] FIG. 4 is a flow diagram depicting an embodiment of a method for managing multiple resources, domains, and service providers in a network environment.

[0010] FIG. 5 is a block diagram depicting an example computing device.

DETAILED DESCRIPTION

[0011] In the following description, reference is made to the accompanying drawings that form a part thereof, and in which is shown by way of illustration specific exemplary

embodiments in which the disclosure may be practiced. These embodiments are described in sufficient detail to enable those skilled in the art to practice the concepts disclosed herein, and it is to be understood that modifications to the various disclosed embodiments may be made, and other embodiments may be utilized, without departing from the scope of the present disclosure. The following detailed description is, therefore, not to be taken in a limiting sense. [0012] Reference throughout this specification to "one embodiment," "an embodiment," "one example," or "an example" means that a particular feature, structure, or characteristic described in connection with the embodiment or example is included in at least one embodiment of the present disclosure. Thus, appearances of the phrases "in one embodiment," "in an embodiment," "one example," or "an example" in various places throughout this specification are not necessarily all referring to the same embodiment or example. Furthermore, the particular features, structures, databases, or characteristics may be combined in any suitable combinations and/or sub-combinations in one or more embodiments or examples. In addition, it should be appreciated that the figures provided herewith are for explanation purposes to persons ordinarily skilled in the art and that the drawings are not necessarily drawn to scale.

[0013] Embodiments in accordance with the present disclosure may be embodied as an apparatus, method, or computer program product. Accordingly, the present disclosure may take the form of an entirely hardware-comprised embodiment, an entirely software-comprised embodiment (including firmware, resident software, micro-code, etc.), or an embodiment combining software and hardware aspects that may all generally be referred to herein as a "circuit," "module" or "system." Furthermore, embodiments of the present disclosure may take the form of a computer program product embodied in any tangible medium of expression having computer-usable program code embodied in the medium.

[0014] Any combination of one or more computer-usable or computer-readable media may be utilized. For example, a computer-readable medium may include one or more of a portable computer diskette, a hard disk, a random access memory (RAM) device, a read-only memory (ROM) device, an erasable programmable read-only memory (EPROM or Flash memory) device, a portable compact disc read-only memory (CDROM), an optical storage device, and a magnetic storage device. Computer program code for carrying out operations of the present disclosure may be written in any combination of one or more programming languages. Such code may be compiled from source code to computer-readable assembly language or machine code suitable for the device or computer on which the code will be executed.

[0015] Embodiments may also be implemented in cloud computing environments. In this description and the following claims, "cloud computing" may be defined as a model for enabling ubiquitous, convenient, on-demand network access to a shared pool of configurable computing resources (e.g., networks, servers, storage, applications, and services) that can be rapidly provisioned via virtualization and released with minimal management effort or service provider interaction and then scaled accordingly. A cloud model can be composed of various characteristics (e.g., on-demand self-service, broad network access, resource pooling, rapid elasticity, and measured service), service models (e.g., Software as a Service ("SaaS"), Platform as a Service ("PaaS"), and Infrastructure as a Service ("IaaS")), and deployment models (e.g., private cloud, community cloud, public cloud, and hybrid cloud).

[0016] The flow diagrams and block diagrams in the attached figures illustrate the architecture, functionality, and operation of possible implementations of systems, methods, and computer program products according to various embodiments of the present disclosure. In this regard, each block in the flow diagrams or block diagrams may represent a module, segment, or portion of code, which comprises one or more executable instructions for implementing the specified logical function(s). It will also be noted that each block of the block diagrams and/or flow diagrams, and combinations of blocks in the block diagrams and/or flow diagrams, may be implemented by special purpose hardware-based systems that perform the specified functions or acts, or combinations of special purpose hardware and computer instructions. These computer program instructions may also be stored in a computer-readable medium that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable medium produce an article of manufacture including instruction means which implement the function/act specified in the flow diagram and/or block diagram block or blocks.

[0017] The systems and methods described herein are related to the creation,

modification, and management of fusion objects. A fusion object is a collection of resources and services grouped together into a single manageable entity. Resources can represent physical resource such as servers or firewalls, or virtual resources such as virtual machines or virtual firewalls. A fusion object can span multiple domains, multiple service providers, and multiple data center providers. As discussed herein, a fusion object allows an entity (e.g., an enterprise customer, a service provider, a data center provider, and the like) to manage networking and non- networking resources as a single managed object. A fusion object can be sold as a service to another entity or used as an internal aggregated resource. Fusion objects can be recursive, meaning a fusion object can contain other fusion object(s) as resources. An example set of Application Program Interfaces (APIs) for the management of fusion objects is discussed herein.

[0018] As used herein, a domain refers to an autonomously managed service provider that offers, for example, networking and/or cloud services. Additionally, a domain may represent a set of resources (e.g., a network or a data center) managed by a single entity. NaaS (Network as a Service) refers to virtualized networks that can be sold as a service to end users. The virtualized network appears to the end user as a dedicated network. IaaS (Infrastructure as a Service) refers to a cloud service that offers computing services (e.g., physical or virtual machines), storage services, network services, and /or other resources.

[0019] FIG. 1 is a block diagram depicting an environment 100 within which an example embodiment may be implemented. Environment 100 may include one or more servers 102 that may each be embodied as one or more server computers each including one or more processors that are in data communication with one another. Server 102 may be in data communication with one or more nodes 106 at first location and one or more nodes 108 that may be at a different location. Individual nodes 106 and 108 may each be a node of a network and the multiple nodes at a particular location may be represented as a cluster, which is also defined as a node of a network. Additionally, environment 100 may include any number of other nodes 110. Nodes 106, 108, and 110 may be embodied as any network connected computer device such as a desktop computer, laptop computer, tablet computer, smart phone, or the like. Server 102 and nodes 106, 108, and 110 are coupled to a data communication network 104, thereby allowing the server, nodes, and other devices and systems to communicate with one another. Data communication network 104 may be embodied as a peer-to-peer connection between devices, a connection through a local area network (LAN), WiFi network, the Internet, or any other communication medium or system.

[0020] Environment 100 represents one example of a networked system that may be managed according to systems and methods described herein. The number of clusters of nodes 106, 108, servers 102, data communication networks 104, and the arrangement and connections between these components may have any arbitrary configuration and may be organized according to any principle for designing such networks. As noted herein, large networks may be managed according to the described systems and methods. [0021] FIG. 2 is a block diagram depicting an example collection of resources and services 200 managed by a single network management system 202. Network management system 202 is accessible by an enterprise user 204 and a service provider administrator 206. For example, enterprise user 204 and/or service provider administrator 206 may access network management system 202 to manage one or more resources, services or systems shown in FIG. 2. In alternate embodiments, network management system 202 is accessible by any number of different users, administrators, systems, devices, and the like. In some embodiments, network management system 202 manages multiple fusion objects, as discussed herein.

[0022] Network management system 202 interfaces to an enterprise customer X domain 208, a service provider X domain 210, a service provider Y domain 212, and an enterprise customer Y domain 214. Specific details are shown regarding service provider X domain 210. The other domains 208, 212, and 214 may contain similar details. Service provider X domain 210 includes an NFV (Network Functions Visualization) domain 216, a cloud domain 218, and a NaaS domain 220. NFV is a network architecture that uses virtualization techniques to virtualize various network functions. Cloud domain 218 includes, for example, one or more cloud-based services or resources. NaaS domain 220 includes an access network domain 222, a metro network domain 224, and a core network domain 226. Alternate embodiments of NaaS domain 220 may include any number of different domains offering any type of domain-related services.

[0023] As mentioned above, some embodiments of network management system 202 manage one or more fusion objects. These fusion objects allow enterprise user 204, service provider administrator 206 or other users to manage the domains, resources, networks, and subnetworks shown in FIG. 2. Rather than managing each of the domains separately, the fusion objects provide a single point of management for all resources and services 200. [0024] FIGs. 3A-3C depict example collections of resources and services grouped together into individual fusion objects. As discussed herein, a fusion object is a collection of resources and services grouped together into a single manageable entity. Resources may include physical resources (such as servers or firewalls) or virtual services (such as virtual machines or virtual firewalls). A fusion object can span, for example, multiple domains, multiple service providers, and multiple data center providers.

[0025] FIG. 3A illustrates a fusion object 300 capable of managing a network 302 coupled to two servers 304 and 306. Fusion object 300 provides a single manageable entity that is accessed to manage network 302 and servers 304, 306.

[0026] FIG. 3B illustrates a fusion object 310 capable of managing two networks 312 and 314, two servers 316 and 318, and a data center 320. Data center 320 includes two virtual machines (VMs) 322 and 324. As shown in FIG. 3B, virtual machine 322 is accessible through network 312 and virtual machine 324 is accessible through network 314.

[0027] FIG. 3C illustrates a fusion object 330 capable of managing two networks 332, 334, two servers 336 and 338, and two data centers 340 and 342. Data center 340 includes a virtual machine (VM) 344, and data center 342 includes a virtual machine (VM) 346. As shown in FIG. 3C, virtual machine 344 is accessible through network 332 and virtual machine 346 is accessible through network 334.

[0028] As shown in FIGs. 3A-3C, fusion objects can group any combination of physical and virtual resources into a single managed entity.

[0029] FIG. 4 is a flow diagram depicting an embodiment of a method 400 for managing multiple resources, domains, and service providers in a network environment. In some embodiments, at least a portion of method 400 is performed by server 102 (FIG. 1). Initially, method 400 identifies physical resources to be managed with a particular fusion object at 402. These physical resources may include networked resources and/or non-networked resources. Method 400 then identifies virtual resources to be managed by the fusion object at 404. Virtual resources include, for example, virtual machines and virtual firewalls.

[0030] Method 400 continues by identifying domains that contain resources to be managed by the fusion object at 406. Service providers that contain resources to be managed by the fusion object are identified at 408. Additionally, method 400 identifies data center providers that contain resources to be managed by the fusion object at 410. A fusion object is created at 412 that defines a collection of identified resources and services to be managed. After the fusion object is created, the collection of identified resources and services are managed using the fusion object at 414. The fusion object uses various resource objects and management interface features to manage the collection of identified resources and services.

[0031] In a particular embodiment, a fusion object contains multiple identifiers, links, and/or other information that identifies any number of resources or services managed by the fusion object. For example, a particular fusion object may contain:

[0032] Data Center 101, Virtual Machine 10 (which identifies a particular data center and a virtual machine within the data center).

[0033] E-Line Service - EVPL VLAN 1001 (which identifies a particular service and a VLAN (Virtual Local Area Network) associated with the service).

[0034] Data Center 201, Virtual Machine 20 (which identifies a particular data center and a virtual machine within the data center).

[0035] As networks change, corresponding fusion objects may be updated or modified to reflect those changes. For example, network topology changes, resource changes, and service changes may necessitate changes in the fusion objects used to manage those networks, resources, and services. Additionally, changes in management requirements or network management preferences by prompt changes to one or more fusion objects to properly implement the changed management requirements or preferences. Depending on the resources and services being managed by a fusion object, a user may define a set of objects to be included in the fusion object.

[0036] FIG. 5 is a block diagram depicting an example computing device 500.

Computing device 500 may perform, for example, tasks and operations discussed herein with respect to determining network data to display, generating network maps, implementing various algorithms, and the like. Computing device 500 may be used to perform various procedures, such as those discussed herein. Computing device 500 can function as a server, a client or any other computing entity. Computing device 500 can be any of a wide variety of computing devices, such as a desktop computer, a notebook computer, a server computer, a handheld computer, a tablet, a mobile device, a set top box, a portable entertainment device, and the like.

[0037] Computing device 500 includes one or more processor(s) 502, one or more memory device(s) 504, one or more interface(s) 506, one or more mass storage device(s) 508, and one or more Input/Output (I/O) device(s) 510, all of which are coupled to a bus 512.

Processor(s) 502 include one or more processors or controllers that execute instructions stored in memory device(s) 504 and/or mass storage device(s) 508. Processor(s) 502 may also include various types of computer-readable media, such as cache memory.

[0038] Memory device(s) 504 include various computer-readable media, such as volatile memory (e.g., random access memory (RAM)) and/or nonvolatile memory (e.g., read-only memory (ROM)). Memory device(s) 504 may also include rewritable ROM, such as Flash memory. [0039] Mass storage device(s) 508 include various computer readable media, such as magnetic tapes, magnetic disks, optical disks, solid state memory (e.g., Flash memory), and so forth. Various drives may also be included in mass storage device(s) 508 to enable reading from and/or writing to the various computer readable media. Mass storage device(s) 508 include removable media and/or non-removable media.

[0040] I/O device(s) 510 include various devices that allow data and/or other information to be input to or retrieved from computing device 500. Example I/O device(s) 510 include cursor control devices, keyboards, keypads, microphones, monitors or other display devices, speakers, printers, network interface cards, modems, lenses, CCDs or other image capture devices, and the like.

[0041] Interface(s) 506 include various interfaces that allow computing device 500 to interact with other systems, devices, or computing environments. Example interface(s) 506 include any number of different network interfaces, such as interfaces to local area networks (LANs), wide area networks (WANs), wireless networks, and the Internet.

[0042] Bus 512 allows processor(s) 502, memory device(s) 504, interface(s) 506, mass storage device(s) 508, and I/O device(s) 510 to communicate with one another, as well as other devices or components coupled to bus 512. Bus 512 represents one or more of several types of bus structures, such as a system bus, PCI bus, IEEE 1394 bus, USB bus, and so forth.

[0043] For purposes of illustration, programs and other executable program components are shown herein as discrete blocks, although it is understood that such programs and components may reside at various times in different storage components of computing device 500, and are executed by processor(s) 502. Alternatively, the systems and procedures described herein can be implemented in hardware, or a combination of hardware, software, and/or firmware. For example, one or more application specific integrated circuits (ASICs) can be programmed to carry out one or more of the systems and procedures described herein.

[0044] Although the present disclosure is described in terms of certain preferred embodiments, other embodiments will be apparent to those of ordinary skill in the art, given the benefit of this disclosure, including embodiments that do not provide all of the benefits and features set forth herein, which are also within the scope of this disclosure. It is to be understood that other embodiments may be utilized, without departing from the scope of the present disclosure.

[0045] The following example APIs are used to implement the systems and methods discussed herein.

Claims

1. A method comprising:

identifying at least one network resource to be managed;

identifying at least one domain to be managed;

identifying at least one service provider to be managed; and

creating, using one or more processors, a fusion object that defines the network resource, the domain, and the service provider to be managed.

2. The method of claim 1, further comprising managing the network resource, the domain, and the service provider using the fusion object.

3. The method of claim 1, wherein identifying at least one network resource includes:

identifying at least one physical resource to be managed by the fusion object; and identifying at least one virtual resource to be managed by the fusion object.

4. The method of claim 1, wherein the fusion object is a collection of resources and services grouped together into a single manageable entity.

5. The method of claim 1, wherein creating the fusion object is further based on a management preference associated with the network resource, domain, and service provider to be managed.

6. The method of claim 1, further comprising modifying the fusion object based on changes to a management preference associated with the network resource, domain, and service provider to be managed.

7. The method of claim 1, wherein the fusion object includes:

an identifier that uniquely identifies the network resource to be managed;

an identifier that uniquely identifies the domain to be managed; and

an identifier that uniquely identifies the service provider to be managed.

8. The method of claim 1, wherein the network resource to be managed is a data center.

9. The method of claim 1, wherein the network resource to be managed is a virtual machine contained in a data center.

10. A method comprising :

identifying a physical resource to be managed by a fusion object;

identifying a virtual resource to be managed by the fusion object;

identifying a domain to be managed by the fusion object;

identifying a service provider to be managed by the fusion object;

identifying a data center provider to be managed by the fusion object; and

creating, using one or more processors, the fusion object that defines the physical resource, the virtual resource, the domain, the service provider, and the data center to be managed.

11. The method of claim 10, further comprising managing the physical resource, the virtual resource, the domain, the service provider, and the data center using the fusion object.

12. The method of claim 10, wherein the fusion object is a collection of resources and services grouped together into a single manageable entity.

13. The method of claim 10, wherein creating the fusion object is further based on a

management preference associated with the physical resource, virtual resource, domain, and service provider to be managed.

14. The method of claim 10, further comprising modifying the fusion object based on changes to a management preference associated with the physical resource, virtual resource, domain, and service provider to be managed.

15. The method of claim 10, wherein the fusion object includes:

an identifier that uniquely identifies the physical resource to be managed;

an identifier that uniquely identifies the virtual resource to be managed;

an identifier that uniquely identifies the domain to be managed; and

an identifier that uniquely identifies the service provider to be managed.

16. The method of claim 10, wherein the physical resource to be managed is a data center.

17. The method of claim 10, wherein the virtual resource to be managed is a virtual machine contained in a data center.

18. An apparatus comprising:

a memory; and

one or more processors coupled to the memory, the one or more processors configured to: identify a network resource to be managed by a fusion object;

identify a domain to be managed by the fusion object;

identify a service provider to be managed by the fusion object; and create the fusion object that defines the network resource, domain, and service provider to be managed.

19. The apparatus of claim 18, wherein the one or more processors are further configured to manage the network resource, the domain, and the service provider using the fusion object.

20. The apparatus of claim 18, wherein the fusion object is a collection of resources and services grouped together into a single manageable entity.